MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6cd4ad54a4973ef8084e5b0d098d49c659cd3f4cdc952377f481f63db1cc16fc. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	6cd4ad54a4973ef8084e5b0d098d49c659cd3f4cdc952377f481f63db1cc16fc
SHA3-384 hash:	802cefa67fd35c6daa4841d2b0c32e8ae958ecc3295729bfb8c51147317fc125d122e1365f2526d0d2316d0fe42273f0
SHA1 hash:	24ae90022db189327cdb3efa16276cf9e89705dc
MD5 hash:	216f4d5dd07d5d1118ac9830b3f32564
humanhash:	purple-bulldog-wyoming-cold
File name:	6cd4ad54a4973ef8084e5b0d098d49c659cd3f4cdc952377f481f63db1cc16fc.apk
Download:	download sample
File size:	9'940'961 bytes
First seen:	2026-09-22 09:30:10 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	196608:mS/SiGH8/94CK8Ax3PZkeRNbXAUm9y1bH+mHtYFwDX:mS/SiX/qCQ5PZNvsY1b+otYFYX
TLSH	T12CA6233DD8065930C8B9673064E30F43A368F665974DD74F25F8E9F0BC87A836A568E8
TrID	49.0% (.APK) Android Package (27000/1/5) 24.5% (.JAR) Java Archive (13500/1/2) 19.0% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) 7.2% (.ZIP) ZIP compressed archive (4000/1)
Magika	zip
Reporter	whack_sh
Tags:	apk

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

101

Origin country :

US

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Tags:

fingerprint signed

Link:

https://www.filescan.io/uploads/6ab24ab83da521ccc194c268/reports/d60014d7-fce2-40cc-9a2f-2c8aeba4d40f/overview

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

apk

First seen:

2026-09-22T07:26:00Z UTC

Last seen:

2026-09-23T02:43:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/6cd4ad54a4973ef8084e5b0d098d49c659cd3f4cdc952377f481f63db1cc16fc/results?tab=lookup

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/6cd4ad54a4973ef8084e5b0d098d49c659cd3f4cdc952377f481f63db1cc16fc/

ReversingLabs TitaniumCloud Android.Trojan.Generic

Threat name:

Android.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-09-22 09:31:00 UTC

File Type:

Binary (Archive)

Extracted files:

1622

AV detection:

4 of 36 (11.11%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ntkk2vfes47pqccolmgqtdkjyzm42p2m3sksg57uqh3d3momc36a._file

Hatching Triage

Gathering data

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/6cd4ad54a4973ef8084e5b0d098d49c659cd3f4cdc952377f481f63db1cc16fc